Flush old sessions in password grant